Mastering IPTables, Part I

[izmufreq]

Super tutorial... Got the basics...

Cheers buddy... Expecting more from you...

:-)

[rahul88051]

thanks a lot !!!!!!!

[wwwwpmd]

Nice one. Added to the list sysadmin.md/iptables.html

[namphong2036]

wonderful work, thank you so much Master :D

[zzsql]

there used to be a nice tool called quicktables which was a simple script that asked you some simple questions to build a basic ruleset based upon your answers.

Then you can customize to your needs.

it stopped being developed a few years ago but you can still download it.

[kirktolliver]

This has to be one of the most comprehensible tutorial on iptables i've seen anywhere. Thank you for shining the light on this subject. Looking forward to wacth your future vids.

[linuxservers]

I understand that - Input Chain match packets wich destination is the Firewall itself and OUTSIDE Chain match packets that were originated inside of the Firewall, Forward chain is for packets that pass through it.

[javier9185]

INPUT through firewall?????? What?? OUTPUT through FIREWALL??? Forward through other host??? NONONONONONONONON PLease d´ont help us!!!!!

[thablackmarkit]

lol i found a neat book,

amazon* c o m/Linux-Firewalls-Detection-Re­sponse-iptables/dp/1593271417/­ref=sr_1_1?ie=UTF8&s=books&qid­=1242065650&sr=1-1

[sannitig]

input = Dest. Firewall

output = Source Firewall

Forward = through firewall

[thablackmarkit]

fascinating.

/me bookmarks

[patcito]

why don't you just do IPTABLES=`which iptables` instead of using whereis? This way is more portable too.

[pdwalker]

That would be a potential security hole, especially if someone is able to manipulate the system path and place another "iptables" executable somewhere else on your system that gets run instead. You always explicitly declare your paths for maximum safety.

[patcito]

If someone would have access to my machine and be able to change the path of iptables which would mean that the intruder probably has root access to my machine, I think that would mean I'm already screwed and the intruder can do whatever he wants. An absolute path wouldn't help at all.

[xxxJohnutzxxx]

@patcito this is ok if you realize that somebody hacked your system, but it happen very often not to realize that.

[axel1973w]

VERY VERY NICE!! I LOVE VIDEO TUTORIALS!! GREAT WORK! want more :)

[patriot1369]

nice tutorial , would be even better if i could see all the letters

[ikemkrueger]

yepp, vi's colorsheme is to dark. the blue letters is as good as not, the pink ones really hard to see.